change logic for ignore to apply ACL permissions
update logic for permissions to Apply (from Ignore)